Forum Discussion
Fletcher_Cocquy
Nimbostratus
Jul 28, 2006Throttling iRule for webapplications
Hi, does anyone have an iRule suitable to throttle connections to a set of URI's (webapplications)?
The problem we are trying to solve is the intentional (or unintentional in the case of the aggressive webcrawler) Denial of Service (DoS)'ing of these webapps which each have their own rate limits (before their database connections are all used up and their back up the apache threads and everything on the shared infrastructure comes to a grinding halt)
So a variation of this iRule:
http://devcentral.f5.com/Wiki/default.aspx/iRules/RateLimit_HTTPRequest.html
is what I am looking for.
With a set of URI's mapped to their rate limits.
When the max number of connections is reached the Max+1 th request gets the "Service Unavailable" message
Assume these webapps are all publicly available (by design and necessity)
Thought I'd check before attempting to code my own
thanks,
Fletcher.
- Hi Fletcher,
- Fletcher_Cocquy
Nimbostratus
I found an apache module that will do exactly what I need with one directive: - Not sure if the editor will include subversion support as I'd like to limit the amount of external code dependencies. But, you can use the export feature to export the rules to a local folder. Then use TortoiseSVN on that folder to link it to a source repository. The Editor even has an option to open the local iRule archive folder for you and then you can check-in your rules as you wish.
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects